Small and Mid-sized Businesses (SMBs) athenticate their end-users primarily with passwords, in spite of the fact that passwords are less secure, inconvenient, and in fact more expensive than stronger forms of authentication. Compared to larger organizations, SMBs on average spent 38 % less per user on identities and authentication - but this was a false economy, as thy also incurred and average of 87% more cost per user as a result of security-related incidents.